PT-2025-9206 · At Software Solutions · At Software Solutions Atsvd

Y4G0 + 1 · Published 2025-03-02 · Updated 2025-03-07 · CVE-2025-1811

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AT Software Solutions ATSVD versions up to 3.4.1

Description A critical issue was found in the Login Endpoint component, specifically in the /login.aspx file, where manipulation of the txtUsuario argument leads to sql injection. This issue can be exploited remotely.

Recommendations For AT Software Solutions ATSVD versions up to 3.4.1, upgrade to version 3.4.2 to address this issue.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-1811

Affected Products

At Software Solutions Atsvd

References · 12

• 🔥 https://github.com/yago3008/cves · Exploit
• 🔥 https://github.com/yago3008/cves/tree/main/CVE-2025-1811 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-1811 · Security Note
• https://twitter.com/CVEnew/status/1896399769360032013 · Twitter Post
• https://t.me/cvenotify/113248 · Telegram Post
• https://t.me/cvedetector/19254 · Telegram Post
• https://vuldb.com/?id.298069 · Note
• https://vuldb.com/?ctiid.298069 · Note
• https://vuldb.com/?submit.504099 · Note
• https://t.me/cvenotify/113004 · Telegram Post
• https://twitter.com/cracbot/status/1897965554985771251 · Twitter Post
• https://t.me/latest_high_impact_cve/1895 · Telegram Post